cjlOjWG[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cjlOjWG.exe
Size

497KB
MD5

eaca152dcf669964c5bd20955860b66c
SHA1

60a3fc742123819a7ed66f2699494a51bd6f51ea
SHA256

a1220eb6311115d3a4a6cbf77665fb444a54f9d715ee0e5c9651459222118c95
SHA512

ad059884dca867a9af5082e8122c751785e4c5f68b66dcf43c84a7e0488b3516601ec3efd701ac5c3818bab23b4f8447f8472354efe1c6b8ec104320139e49e2
SSDEEP

12288:clUMz6IVAR5b13em+PbmLeX4ySZ11sarqAO6UwHokvsFACo+r:MXc87f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cjlOjWG.exe

Files

cjlOjWG.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 495KB - Virtual size: 494KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ